A method and device for constructing a file derivative graph

Abstract

This specification discloses a method and device for constructing a file derived graph. The method includes performing the following graph initialization operations for any file to be monitored: creating a file node F0 corresponding to the current version of the file, determining a device node D (F0) corresponding to the current storage device of the current version, creating F0 and D (F0); after monitoring the preset file derivation operation, perform the following graph update operation for the derivation operation: create a file node Fn corresponding to the derivation version, and determine according to the current storage device of the derivation version Corresponding device node D (Fn); create an edge between Fn and D (Fn), create an edge between Fn-1 and Fn, and the Fn-1 is the file node corresponding to the version before derivation. This method constructs a file derivative graph through model construction, which is used to represent the storage relationship between files and storage devices, so that devices that store files containing private data can be located, thereby locating devices that leak private data.

Description

Technical field [0001] Embodiments of the present specification relate to the field of information security, in particular to a method and apparatus for constructing a file derivative diagram. Background [0002] Many devices in an enterprise contain sensitive files, such as trade secret files or privacy files, for which they have leak-proof security requirements that allow these sensitive files to be transferred between devices within the enterprise without leaking to the outside world. In order for these sensitive files not to be leaked, there are many anti-leak strategies. However, existing anti-leak policies cannot guarantee that all sensitive files will not be leaked, and when sensitive files are leaked, in order to develop remedial actions against the device or employee who leaked the sensitive file, such as downloading patches or warning employees, it is often necessary to locate the device or employee who leaked the sensitive file first. [0003] However, existing leak p...

AI Technical Summary

Problems solved by technology

However, the existing anti-leakage strategy cannot guarantee that all sensitive files will not be leaked. When sensitive files are leaked, in order to take remedial measures against the devices or employees who leaked sensitive files, such as downloading patches or warning employees, it is usually necessary to locate the leaked sensitive files first. equipment or staff

[0003] However, none of the existing anti-leakage strategies can locate the devices or employees that leaked sensitive files. Enterprises can only check all devices and employees in the enterprise one by one when sensitive files are leaked, which is time-consuming and labor-intensive.

Images